Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/40b39b2a-cdef-4445-ace8-bb39d43cda5d/7cca8c9b-95b3-3789-93a9-141f27073aeb.roa
File: 7cca8c9b-95b3-3789-93a9-141f27073aeb.roa (raw, json)
Hash identifier: nGuSCazwdCfzy5bmu2XjjytTjSsiYZalnNIZQ61IO9Y=
Subject key identifier: E4:85:34:34:BD:50:C3:E7:52:4E:63:7E:BF:8F:13:CF:FF:A5:50:B3
Certificate issuer: /CN=40b39b2a-cdef-4445-ace8-bb39d43cda5d
Certificate serial: 010D0C9F432858486D904CCF0A4B5D341DCC40D8
Authority key identifier: DA:82:75:7B:6B:78:B8:76:D7:46:CA:D8:81:7A:BF:9A:0B:16:5B:62
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/40b39b2a-cdef-4445-ace8-bb39d43cda5d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/40b39b2a-cdef-4445-ace8-bb39d43cda5d/7cca8c9b-95b3-3789-93a9-141f27073aeb.roa
Signing time: Sat 04 Jan 2025 02:00:39 +0000
ROA not before: Sat 04 Jan 2025 02:00:39 +0000
ROA not after: Fri 04 Apr 2025 01:00:39 +0000
asID: 14618
IP address blocks: 204.8.173.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:6d:90:4c:cf:0a:4b:5d:34:1d:cc:40:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=40b39b2a-cdef-4445-ace8-bb39d43cda5d
Validity
Not Before: Jan 4 02:00:39 2025 GMT
Not After : Apr 4 01:00:39 2025 GMT
Subject: CN=9d673518-d58d-4904-9d55-4fcb5b965b5a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:40:86:5e:14:85:76:30:85:87:83:79:e6:13:
c5:fd:84:c8:12:91:56:d2:ea:eb:0e:03:3f:4f:96:
ed:cb:cd:e9:a8:b7:6b:2b:86:64:fc:5c:9f:ac:4d:
ba:10:aa:4a:d7:5e:b3:a0:78:2c:a4:9b:7e:51:16:
0b:3f:48:eb:28:48:81:f8:fe:fb:c5:71:e4:b8:2d:
91:51:6d:12:94:8a:c5:5f:0a:06:ff:4b:5c:da:2c:
08:a7:a7:6f:12:49:cd:b6:b9:d3:27:44:df:b0:5a:
4a:7b:61:32:e1:a3:80:b3:75:5e:a1:26:44:11:69:
57:2b:56:fe:cc:e4:c6:ec:d0:3f:d6:1f:c1:1c:99:
f7:c7:0e:1d:73:b0:9b:e4:47:a1:bc:52:60:97:8f:
ab:69:a6:54:4a:f1:2e:37:0c:5e:27:a2:b6:c4:46:
9a:e7:06:47:b4:80:8d:8c:e9:1c:6b:10:b3:3c:a5:
9a:a1:f3:6f:15:a5:aa:ac:a4:99:23:ed:2d:08:66:
88:b4:40:fa:af:f4:a0:3a:03:c0:5d:70:e6:95:b0:
85:53:47:8d:44:b7:e0:1c:2d:f2:7e:c3:7e:1f:91:
63:b6:0f:00:a3:88:99:3a:df:f3:5d:82:fd:9e:f8:
0a:1f:69:51:03:cf:cc:15:f6:45:0e:e9:da:f7:b7:
43:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:85:34:34:BD:50:C3:E7:52:4E:63:7E:BF:8F:13:CF:FF:A5:50:B3
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/40b39b2a-cdef-4445-ace8-bb39d43cda5d/7cca8c9b-95b3-3789-93a9-141f27073aeb.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/40b39b2a-cdef-4445-ace8-bb39d43cda5d/40b39b2a-cdef-4445-ace8-bb39d43cda5d.crl
X509v3 Authority Key Identifier:
keyid:DA:82:75:7B:6B:78:B8:76:D7:46:CA:D8:81:7A:BF:9A:0B:16:5B:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/40b39b2a-cdef-4445-ace8-bb39d43cda5d.cer
sbgp-ipAddrBlock: critical
IPv4:
204.8.173.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
a1:e5:f1:ee:11:33:fd:26:fa:86:d0:41:ec:97:ae:c6:f0:17:
b5:4f:7a:69:35:00:7a:4e:94:71:b6:23:02:3b:2a:0d:c3:ba:
de:75:c0:3d:0d:d7:c5:d5:95:d3:cd:7d:3f:46:66:8f:2f:51:
64:a5:20:80:5a:8c:f0:0d:eb:02:52:b2:39:df:c6:08:1e:ee:
c4:43:cc:46:1e:d5:03:a3:44:89:d8:8f:7b:5a:8b:06:65:b8:
5d:13:75:e5:12:5a:64:d3:75:e8:29:6b:3c:19:d4:2b:33:30:
b4:08:4f:19:e0:6c:16:fd:3f:bd:70:a2:f0:f9:c6:b8:d7:d8:
11:79:04:51:b7:00:55:bc:ae:d7:ea:f9:99:75:3f:52:5d:2e:
1b:6a:42:cf:3b:dc:6d:48:eb:e8:e5:33:0c:00:49:43:2c:f1:
2a:eb:88:61:8c:50:e6:b7:48:65:36:66:fa:11:97:ca:aa:a8:
20:35:09:be:79:64:74:34:d0:dd:9d:55:bc:6f:48:78:f3:53:
bc:19:06:54:2b:25:f3:90:0f:52:0f:c2:e4:b5:00:72:82:1a:
23:3f:4a:af:da:11:06:cb:e7:8b:fd:ec:5d:ba:03:5d:3d:81:
13:73:95:f6:8f:4d:eb:d7:c0:41:1a:7e:3c:3e:61:75:09:18:
3f:b9:b6:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 09:45:06 2025 by rpki-client